Vulnerability in Black Tie Project

CVE-2002-0446

categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID (cid) parameter, which leaks the pathname in an error message.

EPSS: 0.026 (83.7th percentile) — read the EPSS interpretation.

Affected products

Black_tie_project — versions 0.4b, 0.5, 0.5b
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)